What a Linux Safety Certification Actually Covers — and What It Does Not

·1 views

A Linux safety certification applies only to a specific software configuration on named hardware, assessed by a named body — it does not certify the Linux kernel itself or assign an integrity level to a product. Before 2024, no dedicated standard existed for incorporating pre-existing software like Linux into ISO 26262 safety arguments, forcing engineers to rely on ill-fitting approaches such as component qualification or proven-in-use claims. ISO/PAS 8926:2024, published on 29 January 2024, introduced a formal mechanism for using pre-existing software architectural elements (PSAEs) in functional safety cases, shifting focus from code quality to classification, complexity, and evidence. Red Hat's In-Vehicle Operating System, certified by exida against ISO 26262 at ASIL-B on the Renesas R-Car S4 platform, stands as the most prominent public example of this approach in practice. Engineers integrating such certified platforms are advised to scrutinise the exact configuration, hardware list, assumptions, and assessor behind any safety claim before incorporating it into their own safety case.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Docker Setup and AWS RDS Lab Highlights Key Timing and Config Lessons

A developer on day 35 of a structured DevOps track tackled two practical tasks: installing Docker on a CentOS server and building an EC2-RDS application stack on AWS. The Docker portion clarified that 'systemctl start' and 'systemctl enable' serve distinct purposes — starting the daemon immediately versus ensuring it persists after a reboot. Installing Docker on RHEL or CentOS requires manually adding the official repository before any packages can be found, a step that catches many beginners off guard. On the AWS side, the RDS instance was provisioned first due to its five-to-ten minute setup time, allowing SSH and Apache configuration to fill the wait and avoid idle time. The exercise underscored a broader principle: in time-boxed environments, always trigger the slowest asynchronous resource before moving on to other tasks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Releases Nice Code, a Tool for Evidence-Based Code Review Beyond Linting

A developer has released Nice Code, an open-source static analysis tool designed to catch engineering problems that compilers, linters, and formatters typically miss. The tool targets context-dependent issues such as sequential async operations, exposed credentials in logs, silently discarded errors, and unsafe database migrations. Unlike traditional linters that enforce syntax rules, Nice Code focuses on intent, risk, and operational behavior across areas including security, concurrency, and data integrity. It is available as a Node-compatible npm package under the handle @sayanmohsin/nice-code and internally runs a Rust engine downloaded automatically from GitHub Releases. The tool supports both focused changed-file checks for daily development and full repository scans, with optional JSON output for machine-readable reporting.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Three Open-Source Tools Aim to Formally Prove AI Agent Rules Work on Every Input

A developer has published three open-source projects designed to bring mathematical certainty to AI agent governance, addressing the gap between probabilistic LLM outputs and deterministic rule enforcement. The core tool, ERDL (Entity-Rule Definition Language), lets engineers define agent behavior rules in plain YAML with a fixed semantic tree, precise decimal arithmetic, and three-valued logic to prevent ambiguous outcomes. A second layer, erdl-vectors, provides 301 frozen cross-implementation test vectors to verify that independent rule engines produce identical results byte-for-byte. A third component, erdl-formal, goes further by attempting to prove that rules hold for every possible input, not just those covered by unit tests. Together, the tools aim to shift the claim of 'deterministic AI governance' from a marketing assertion to a verifiable, auditable guarantee.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer launches GitCard, a visual project portfolio tool for GitHub users

A developer has publicly launched GitCard, a side project designed to give developers a more visual way to showcase their work beyond traditional resumes or GitHub profiles. The platform allows users to connect their GitHub account and build a shareable profile featuring project screenshots, descriptions, and technology stacks. Drawing inspiration from design portfolio platforms like Behance, the creator wanted a similar experience tailored to software developers. GitCard also experiments with a physical wallet-sized card carrying a QR code that links to a user's profile, intended for use at events like hackathons or career fairs. The project is live at gitcard.io, and the developer is actively seeking user feedback to guide future development.

0 comments Read more at DEV Community